1. Privacy Policy

As of: May 2018
Thank you for your interest in the portfolio of services offered online by Streitz Hoppen & Partner. This privacy policy will inform you on the nature, scope and purpose of the processing of your data.
In general, you can use our website without providing personal data. Where personal data (e.g. name, address or email address) are collected on our website, they may, wherever possible, be provided on a voluntary basis. These data will, in principle, not be forwarded to any third parties without your prior express consent.

We would like to point out that any data transfer on the internet (e.g. when communicating by email) may be compromised. The data cannot be protected completely against third-party access.

2. Name and Contact Data of the Controller

Controller:
STREITZ HOPPEN & PARTNER
IT Experts
Pingsdorfer Str. 54
50321 Brühl
Germany
Phone +49 (0) 2232 – 43076
Fax +49 (0) 2232 – 48720
Email: info@shp-itexperts.de
Internet: www.shp-itexperts.de
VAT identification number.: DE284053228
Register number/court: PR 2661, AG (Local Court of) Essen

Represented by the partners:
Dr. Siegfried H. Streitz
Dr. Peter J. Hoppen
Mr Wiegand Liesegang
Mr Thomas P. Schneider
Ms Sabine Schreiber-Ehle

3. Data Protection Officer

Given the number of employees, Streitz Hoppen & Partner does not require a data protection officer to be designated in accordance with the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Upon request, we will be glad to inform you on our data protection measures.

4. Scope and Purpose of the processing of personal data

You may principally access our website without providing personal data. You are at any time free to decide whether or not to provide your personal data to us.

Under Article 14(1)(d) of the GDPR, the controller is obliged to inform the data subject on the parties involved and on the categories of personal data processed.

4.1. Personal data

Under Article 4(1) of the GDPR, personal data means any information relating to an identified or identifiable natural person. They include identifiers such as your name, your contact details, your IP address when accessing our website, and any data transferred to us via a contact form or in connection with the sign-up and login functions.

4.2. Contact (consultation by phone, email)

You may contact us by phone or by email and send messages to us. To be able to answer your questions we need some basic data. These data are solely processed for the purpose of a consultation by phone or email or for processing and answering inquiries and any other related communication.

The processing of these data is therefore based on a consent under Article 6(1(1)(a) of the GDPR and for the purpose of contract development and execution in accordance with Article 6(1)(1)(b) of the GDPR.

4.3. Server statistics

Each time our website is visited, data will automatically be transferred from the internet browser used to the Web server and be saved in log files. The following data are saved until deleted:
• Date and time of your visit
• Page visited or name of the file retrieved
• Referring site
• Data volume transferred
• Access status message (successful transfer and error messages, if applicable)
• Name and data of the browser used
• IP address of the retrieving system

Processing is made for the purpose of
• allowing a connection to the website,
• enabling an optimized display of the website,
• checking and ensuring system security and stability,
• allowing and improving website administration,
• preventing any abuse of our website, if necessary, and
• tracking unauthorized access.

The data saved will not be merged with other data sources. Usually, the data cannot be assigned to identifiable persons. The data are, in principle, not processed for the purpose of gathering further information on the individual visitors of our website.

We reserve the right to review these data if there is specific reason to suspect the illicit use of our website.
Under Art. 6(1)(1)(f) of the GDPR, we have a legitimate interest in processing the data for the purpose of system maintenance and website optimization.

4.4. Cookies

Some webpages use so-called cookies. Cookies are small text files that are placed on your computer and stored by your browser.

Cookies serve to make our offer more user-friendly, efficient and secure. Most of the cookies used by us are so-called session cookies. They will be deleted automatically at the end of your visit. Other cookies remain stored on your computer until deleted. These cookies allow us to recognize your browser at your next visit.

You can configure your browser to alert you every time a cookie is placed on your computer or to allow cookies on a case-by-case basis, to refuse to accept cookies in certain cases or in general, or to delete cookies automatically when the browser is closed. However, if you deactivate cookies, you may not be able to use the full functionality of this website.

The processing of personal data by using cookies is legally based on our legitimate interest in accordance with Art. 6(1) of the GDPR.

4.5. Privacy Policy for the use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”, which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States. Google will use such data within the context of the terms and conditions of Google’s privacy policy which can be accessed at
https://policies.google.com/privacy

In case of activation of IP anonymization on this website, Google will, however, truncate your IP address beforehand within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website operator with other services relating to website use and Internet usage. The IP address transmitted by your browser within the scope of Google Analytics will not be associated with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of data generated by the cookie and related to our use of the website (including your IP address) by downloading and installing the browser plug-in available at
https://tools.google.com/dlpage/gaoptout?hl=de

The tracking measures used are supposed to ensure a user-centred design and the ongoing optimization of our website. In addition, we use the tracking measures to compile statistics on the use of our website and to analyse them for the purpose of optimizing our offer for you. These interests are to be deemed legitimate in the sense of the aforementioned regulations. The tracking measure used is based on Art. 6(1)(1)(f) of the GDPR.

4.6 Use of web fonts

This website uses external fonts, namely Google fonts. Google Fonts is a service provided by Google Inc. (“Google”).
These web fonts are embedded through a server request, usually to a Google server in the United States.
Information about which of our web pages you have visited is thereby transmitted to the server.
Google also stores the IP address of the device browser used by the person visiting these web pages.
For more information, please refer to Google’s privacy policy which can be accessed at:

www.google.com/fonts#AboutPlace:about
http://www.google.com/policies/privacy/

5. Disclosure of data

Within the context of the operation of this website, personal data are, in principal, only disclosed to a third party, if
• the data subject has given his or her explicit consent in accordance with Art. 6(1)(1)(a) of the GDPR,
• disclosure is required for asserting, exercising or protecting legal claims and if there is no reason to assume that such interests are overridden by the interests of the data subject which require non-disclosure of personal data in accordance with Art. 6(1)(1)(f) of the GDPR.
• disclosure is necessary for compliance with a legal obligation under Art. 6(1)(1)(c) of the GDPR, and/or
• disclosure is necessary for the performance of a contract to which the data subject is party in accordance with Art. 6(1)(1)(b) of the GDPR.

6. Your rights as data subject

If your personal data are processed within the context of your visit to our website or in connection with the request for information or with contract development or execution you as “data subject” in the sense of the GDPR have the following rights:

6.1. Right of access

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed by us. The right of access does not apply, however, if the data must not be deleted for reasons of legal or statutory retention periods or if they merely serve the purpose of data backup or of monitoring data protection where providing information would require disproportionate effort and data processing for other purposes by suitable technical and organizational measures is impossible.
You may demand information on:
• the purpose of the processing,
• the categories of personal data concerned
• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
• the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing • the right to lodge a complaint with a supervisory authority,
• where the personal data are not collected from you, any available information as to their source,
• the existence of automated decision-making, including profiling and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such automated decision-making,
• Where personal data are transferred to a third country recipient, the data subject shall – provided that the European Commission has not taken a decision on an adequate level of protection under Art. 45(3) of the GDPR – have the right to be informed of the appropriate safeguards pursuant to Art. 46(2) of the GDPR relating to the transfer.

6.2. Rectification and completion

If you notice that we have inaccurate personal data concerning you, you have the right to obtain from us the rectification of inaccurate personal data. Additionally, you have the right to have incomplete personal data completed.

6.3. Erasure

You have the right to erasure (“right to be forgotten”) where one of the following grounds applies:
• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
• you withdraw consent on which the processing is based,
• you object to the processing of your personal data published by us,
• you object to the processing of your personal data not published by us and there is no overriding legitimate interest in the processing,
• your personal data have been unlawfully processed,
• the personal data have to be erased for compliance with a legal obligation to which we are subject.

The right to erasure does not apply if in a case of nonautomated data processing erasure is impossible or only possible with a disproportionate effort due to the specific mode of storage, and if your interest in erasure is minimal. In this case, the right to erasure is replaced with a right to restriction. Neither is there a right to erasure if the data must be retained for legal reasons (e.g. for tax regulations).

6.4. Restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:
• you contest the accuracy of the personal data. In this case restriction may be requested for a period enabling us to verify the accuracy of the personal data.
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• we no longer need your personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
• you have objected to processing pursuant to Article 21(1) of the GDPR. Restriction may be demanded pending the verification whether our legitimate grounds override yours.

Restriction of processing means that personal data shall only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We shall inform you before lifting the restriction of processing.

6.5. Right to data portability

You have a right to data portability provided that the processing is based on your consent pursuant to Article 6(1)(1)(a) or Article 9(2)(a) of the GDPR or on a contract to which you are a party and the processing is carried out by automated means. In this case, the right to data portability includes the following rights provided that the rights and freedoms of others are not adversely affected:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right to transmit those data to another controller without hindrance from us. You have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

6.6. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority competent for your habitual residence or place of work or place of the alleged infringement if you consider that the processing of your personal data is illegitimate.

6.7. Right to object

You have the right to withdraw your consent to the processing of your personal data at any time. You may inform us of the withdrawal of your consent by:

Phone +49 (0) 2232 – 43076
Fax +49 (0) 2232 – 48720
Email: info@shp-itexperts.de

7. Data transfer to third countries

Where we transfer personal data to third country recipients outside the European Economic Area (EEA), such transfer will only take place if the European Commission has confirmed that such third country maintains an adequate data protection level or if other appropriate data protection safeguards are in place (e.g. binding data protection regulations within the company concerned or EU standard contractual clauses).

Transfer of personal data to countries outside the EU/EEA is only made within the context of the use of Google Analytics.

8. Retention period

Personal data are deleted or blocked as soon as the reason for retention does no longer exist. Further retention may be required if there is a legal obligation and if the data are needed for contract conclusion or execution or for enforcing legal claims.

9. Objection to commercial emails

We object to the use of our contact data published for compliance with the obligation to publish a legal notice for the purpose of sending us unsolicited commercial emails and information material. The website operator explicitly reserves the right to take legal action in the case of the unsolicited sending of commercial information, e.g. by spam emails.